Ferplast places great importance on the protection of personal data obtained or to be obtained through its activities. In this context, the company has prepared this policy to determine the principles and measures to be applied regarding the processing, protection, storage, destruction, and informing of data subjects, and our company carries out activities related to personal data within the scope of both the Personal Data Protection Policy and the Personal Data Protection Law No. 6698.

What is Personal Data?

Personal data refers to any kind of information relating to an identified or identifiable natural person.

Purpose of Processing Personal Data, Transfer, Collection Method, and Legal Basis

Ferplast processes personal data for purposes including:

• Fulfillment of legal obligations and protection of the company’s legal rights
• Conducting contract negotiations, entering into contracts, performing contracts, monitoring contract processes, and termination
• Providing better service to customers, determining suitable projects and services for customers, and improving products and services
• Management, execution, and supervision of Ferplast’s activities
• Offering products and services tailored to customer preferences
• Tracking and fulfilling customer requests and complaints, measuring customer satisfaction
• Procurement of materials and services required by Ferplast
• Promotion, announcement, and execution of sales and marketing activities of Ferplast
• Procurement, planning, management, and monitoring of the human resources required by Ferplast, provision of employee rights
• Processing is carried out for the purposes of coordination with subsidiaries, business partners, shareholders, affiliates, insurance companies, suppliers, public institutions and/or organizations, and third parties for the protection of the company’s contractual and legal rights.

Processing of personal data includes all kinds of transactions performed on data, whether fully or partially automatic, or non-automatic, such as obtaining, recording, storing, preserving, modifying, rearranging, disclosing, transferring, taking over, making it available, classifying, or preventing its use.

As a general rule, Ferplast processes personal data for its own activities. In this context, Ferplast may transfer the personal data of the data subject, including special categories of personal data, to third parties (Group Companies, business partners, shareholders, subsidiaries, insurance companies, suppliers, public institutions and/or organizations, and third parties with the same purposes) as a legal requirement.

Ferplast keeps personal data for the period specified in the relevant legislation if there is no specified period for the storage of personal data. If no period is regulated in the relevant legislation regarding how long personal data should be kept, personal data is processed for the duration required by Ferplast’s practices and commercial customs related to the activity carried out by the company. If you request the deletion, destruction, or anonymization of your personal data, this request can be fulfilled by Ferplast after the period specified by legal regulations; however, during this period, your personal data will not be processed by Ferplast and will not be shared with third parties except for mandatory obligations arising from national and international laws, regulations, and contracts.

Furthermore, personal data may be shared with our shareholders for the determination of strategies related to Ferplast’s activities and the fulfillment of audit activities.

In accordance with this policy, Ferplast may transfer personal data abroad, provided that there is adequate protection for personal data, or the data controllers in Turkey and the relevant foreign country undertake adequate protection in writing and with the permission of the Authority.

Rights of the Data Subject

The data subject has the right to be informed during the acquisition of personal data. This text has been prepared for the purpose of informing the data subject.

In addition, the data subject has the right to:

• Learn whether personal data is processed
• Request information if personal data has been processed
• Learn the purpose of processing personal data and whether they are used in accordance with its purpose
• Know the third parties to whom personal data is transferred, whether domestically or abroad
• Request correction if personal data is incomplete or incorrectly processed
• Request the deletion of personal data if the conditions requiring processing no longer exist
• Request notification of the transactions made regarding the correction or deletion of personal data to third parties to whom personal data has been transferred
• Object to the occurrence of a result against the data subject by exclusively analyzing the processed data through automated systems
• Demand compensation for damages in case personal data is processed unlawfully and causes damages.

The data subject can communicate their requests to the following address, telephone number, or email address with proof of their identity:

Company Name: Ferplast Dekoratif ve Peyzaj Ürünleri San. Ve Tic. Ltd. Şti.

Address: OSB Bakırcılar ve Pirinççiler Sanayi Sitesi Mustafa Kurtoğlu Cad. No:33 Beylikdüzü İstanbul

Email: info@ferplast.com.tr

Phone: +90 212 875 73 13

The data subject’s requests are fulfilled within 30 (thirty) days at most and necessary information is provided to the data subject free of charge.